CVE-2007-3701: Input Validation
First published: Wed Jul 11 2007(Updated: )
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tippingpoint Tipping Point | =400 | |
| 3com Tippingpoint Ips Tos | =2.2 | |
| Tippingpoint Tipping Point | =1200 | |
| 3com Tippingpoint Ips Tos | =2.5.1 | |
| Tippingpoint Tipping Point | =50 | |
| 3com Tippingpoint Ips Tos | =2.2.1.6506 | |
| 3com Tippingpoint Ips Tos | =2.1 | |
| Tippingpoint Tipping Point | =5000e | |
| 3com Tippingpoint Ips Tos | =2.2.1 | |
| Tippingpoint Tipping Point | =2400e | |
| Tippingpoint Tipping Point | =sms | |
| 3com Tippingpoint Ips Tos | =2.2.3 | |
| Tippingpoint Tipping Point | =zpha | |
| Tippingpoint Tipping Point | =x505 | |
| 3com Tippingpoint Ips Tos | =2.2.2 | |
| Tippingpoint Tipping Point | =1200e | |
| Tippingpoint Tipping Point | =200e | |
| 3com Tippingpoint Ips Tos | =2.2.4 | |
| 3com Tippingpoint Ips Tos | =2.1.4.6324 | |
| Tippingpoint Tipping Point | =x506 | |
| Tippingpoint Tipping Point | =200 | |
| 3com Tippingpoint Ips Tos | =2.5 | |
| Tippingpoint Tipping Point | =600e |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://security-assessment.com/files/advisories/2007-07-11_Tippingpoint_IPS_Signature_Evasion.pdf
- http://www.3com.com/securityalert/alerts/3COM-07-003.html
- http://www.securityfocus.com/bid/24855
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html
- http://www.securitytracker.com/id?1018361
- http://secunia.com/advisories/26013
- http://www.vupen.com/english/advisories/2007/2490
- http://osvdb.org/35970
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35336
- http://www.securityfocus.com/archive/1/473311/100/0/threaded
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/tippingpoint
- canonical/tippingpoint tipping point
- version/tippingpoint tipping point/400
- vendor/3com
- canonical/3com tippingpoint ips tos
- version/3com tippingpoint ips tos/2.2
- version/tippingpoint tipping point/1200
- version/3com tippingpoint ips tos/2.5.1
- version/tippingpoint tipping point/50
- version/3com tippingpoint ips tos/2.2.1.6506
- version/3com tippingpoint ips tos/2.1
- version/tippingpoint tipping point/5000e
- version/3com tippingpoint ips tos/2.2.1
- version/tippingpoint tipping point/2400e
- version/tippingpoint tipping point/sms
- version/3com tippingpoint ips tos/2.2.3
- version/tippingpoint tipping point/zpha
- version/tippingpoint tipping point/x505
- version/3com tippingpoint ips tos/2.2.2
- version/tippingpoint tipping point/1200e
- version/tippingpoint tipping point/200e
- version/3com tippingpoint ips tos/2.2.4
- version/3com tippingpoint ips tos/2.1.4.6324
- version/tippingpoint tipping point/x506
- version/tippingpoint tipping point/200
- version/3com tippingpoint ips tos/2.5
- version/tippingpoint tipping point/600e